PT-2005-3309 · Mozilla · Firefox

Dori Eldar · Published 2005-07-27 · Updated 2017-07-11 · CVE-2005-2395

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.0.4 through 1.0.5

Description The issue is related to the authentication scheme used by the browser. According to the description, the browser does not choose the challenge with the strongest authentication scheme available as required by RFC2617. This might cause credentials to be sent in plaintext even if an encrypted channel is available.

Recommendations For Mozilla Firefox versions 1.0.4 through 1.0.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-2395

Affected Products

Firefox

References · 8

• 🔥 http://securityfocus.com/archive/1/405666 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2395 · Security Note
• http://securityreason.com/securityalert/8 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22272 · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=281851 · Note
• http://securiteam.com/securitynews/5PP0L00GUQ.html · Note
• http://securityfocus.com/bid/14325 · Note
• http://osvdb.org/19002 · Note